The easy way, if you want to this sort of thing regularly, is to work for a place that discovers zero day exploits. You'll get a salary/wage and benefits. Here is a fun place to do that: http://advancedsecuritylabs.com/