If you're serious about being a security consultant, I'd checkout https://breaker101.daeken.com https://breaker101.daeken.com. Not sure when the next class is g

If you're serious about being a security consultant, I'd checkout https://breaker101.daeken.com https://breaker101.daeken.com. Not sure when the next class is going to be, but I took the first iteration of the course and people were able to transition from developers to security consultants if they put the time in. Not sure how much time most people spent on the course, but I spent between 3 and 8 hours a week. I took the course mostly for fun and to get more familiar with security, but I learned all the major web security flaws and a bit of crypto. Enough that I'd be confident I could find a job in the security field if I wanted to. It also helps that you can add Cody(http://en.wikipedia.org/wiki/Cody_Brocious http://en.wikipedia.org/wiki/Cody_Brocious) to your references. If you (or anyone else) want to know more about the course feel free to email me: noah@noahc.net . I'm happy answer whatever questions you might have.