Anyone good in using security for money?

I read articles about security.

I wonder if some techniques can be used to win money, on the grey hat line. Any feedback on this? Feel free to post below to share.

find securtiy hole of web and deface that web (very blackhat)

You can try cracking some bug bounty programs from sites like Facebook and Amazon.
Although, you must be very good at what you do (you must be better than their highly qualified security engineers)

If you want to go for something simpler, try offering network security consulting to small businesses.
You can try finding them via fb pages.