Quick is a problem. Whitehat or “security researcher” are what you’re looking for. Tryhackme is a good place for him to start. You can also check for a local hackerspace or makerspace, there’s a good chance someone at either would be willing to help a kid out.