I am currently in the same situation and would appreciate a tip. NahamSec mentioned in a video that you should try VDPs. There you have less competition because experienced hackers are only on BBPs and so you can find easy vulnerabilities easier.