Sure. There are different disciplines in information security. Application security broadly web, mobile and desktop applications. Application security is the easiest to start working with because, as another commenter said, it is ubiquitous. You can find bug bounties for most major tech companies and their application software these days, which means there is a quite a lot to practice with.