Ask HN: How do I get into software security testing?

Are there certifications that clients look for? Are there classes or fields I can focus on while still in University? Is it similar/the same as penetration testing?