I'd like to dip my toes in the water with bug bounties too, but don't know where to start. Giants like google seems like it would be way above my level and I wouldn't get anywhere, but I don't know how to find "easier" bug bounties that are likely to have bugs that someone like me would have a chance to find.

Totally I've been a pentester for 5 years and work remotely from anywhere earning around 4000$ after tax from my day job. Last few months I'm running my own company and get more than triple that. Pentesting is hard to break into but its technical work and easy to shift to something else later on

I think the real market is in the database breach. Sell the data ad also use it for your own business

It aint good, it ain't bad. But someone gotta do it

From what I saw, it looks similar to developer wages

i dont know

there will be other tasks besides this issue, and it is profitable yes.

It'd take pages to discuss this at length, but, please understand how volatile bug bounties are. You'll have delays in payments, mishandling, etc., I've disclosed 20-30+ exploits throughout the past 5 or so years, even if I stated upfront that the money they'd pay me would be donated, they always found ways to try and not pay up, even if, in a good few cases of my disclosures, they had heavy impact on their products, some of these products being billion dollars companies.

It's rough. Don't go into it.

It may be a problem to convince yourself that you are good :)