Ask HN: Web security/pentesting as a hobby

I have a CS degree, been a developer for a while but turned into management quite quickly. Now I'd like to brush up on my security skills in my free time - how can I start?