I have no idea what you mean by a "proper" vulnerability researcher and I find the concept faintly offensive. But what do I know?