Security is not a product, but a process.
The best way of learning about anything is by doing.