> You can't just post these things on eBay and hope for the best. Of course not. You start a "security consulting company" and then apply to be a contractor. T

> You can't just post these things on eBay and hope for the best. Of course not. You start a "security consulting company" and then apply to be a contractor. There are hundreds, if not thousands, of companies like that. And as an individual researcher, you can either join such a company, or freelance for one. It's indeed not trivial, but I imagine that anyone with enough experience in the business would know how to pull it off.