These security experts get paid to think like hackers