I do webapp pentesting, and fortunately I was looking at an interesting application this week. Overall the job isn't bad. I get to work remotely and for the most part just tinker on the computer all day. It is somewhat high-pressure though as you're expected to deliver results. It can be tough but I consider myself lucky.