[jonnycomputer]

Answers might be more helpful if OP was a bit more specific on what they had in mind with "security", which is awfully broad.

[marcinzm]

Yeah. There's a very big difference between pen testing and coming up with SOC compliant processes.