In ~15 years of a career that did not begin with a CS degree (or degree of any sort), this has not proven to be the case for me at all.
I've also built security practices for three organizations, and can attest that not only is education not a positive hiring factor, it's at best neutral.
In the last seven years I have interviewed more than 150 people and only 2 or 3 did not have relevant technical degree.