Wanted to ask a question that I've seen answered in many places, but I could find nothing related to a specific point I got.
Just a bit of background, I work in 3rd level software support for 5+ years and got to a point where my job does not require the skills I acquired over time(don't want to say the word "overqualified").
Over time I developed many "advanced" skills, at least for a support role and those include reverse engineering, programming, scripting, debugging etc which I can't really use with my current role.
Decided to get into security for realizing that there are more oportunities there. My interest is more in webapp pentesting and Im taking several courses(and VM labs for practice) but feel that may be challenging the fact that I don't have any formal experience as a pentester.
So I thought that maybe if I started to bug bounty hunt and use the vulnerabilities I find in my cv as experience, would help me getting closer to the door of the hiring manager but wanted to ask for opinion of people already in the industry... does this make any difference? Does it help? Is there anything else you would suggest?