Here is proof that being technically capable is not so useful if you don't have corporate/governmental/legal knowledge and "street smarts"
People (especially the technically inclined) have a rose-coloured view of how things should work. And yes if the company is up to date on security practices your vulnerability reports will be welcome.
If not, well... (Not saying it should be like this, I'm saying drawing attention to yourself needlessly is not the wisest thing, especially if you don't have a plan B)
People (especially the technically inclined) have a rose-coloured view of how things should work. And yes if the company is up to date on security practices your vulnerability reports will be welcome.
If not, well... (Not saying it should be like this, I'm saying drawing attention to yourself needlessly is not the wisest thing, especially if you don't have a plan B)