Don't go into security for the money. For the same effort you can make more money in some other part of the software industry. Only go into this industry if you're nuts about it because you will be competing with people who are nuts about it.
It seems like being a highly paid security engineer requires a lot more commitment than being a highly paid software engineer.