1. Most folks dgaf about certs, and I agree with them. Certs are BS. I only have certs because employers paid for them and in tech (especially security) there’s a LOT of free time if you know what you’re doing. Certs only prove you can pass a test.

2. Bold of you to assume most companies have intrusion detection systems and that their monitoring isn’t muted half the time.

3. Findings come from an automated report generated by a scanner that does literally all the work.

OP post is really not that far off. It’s an easy gig.

Source: I’ve worked on both sides.