Not a segment specific question, but if I discover a bug while working on a task for my employer, will that bounty be discounted off the bill or will it go to me directly? what's typical?
It's best-practice to get permission from your employer to submit bugs you discover on their time to bounty services, and then for you to collect the entire bounty. It's common for people just to quietly submit bounties; I wouldn't, but then I work in a field where it's a big deal to disclose on-the-job findings. You might not.
I think that's a key line that should have been added to the top tips.