How much can a fresh grad with OSCP (working towards crest) and CTF experience expect to make in a consultancy? Looking at different roles like pen testing & threat hunting.