I wouldn't even consider penetration/security testing to be in the same field. My experience in the traditional QA areas is that in order of likelihood to free

I wouldn't even consider penetration/security testing to be in the same field. My experience in the traditional QA areas is that in order of likelihood to freelance are performance testers, automation/development testers, and finally manual testers.