i'm going to give you some tough love right now, because you've sort of got the wrong concept of what a 'security job' is in your head.

first of all - why the hell are you waiting for someone to give you permission to start doing this job? if you want to do this job, just start fucking doing it.

contribute to security mailing lists and keep an eye out for opportunities. write articles. blog. go to events. write code, open source it. contribute documentation if you can't code. sell yourself as a consultant. appear to know what the hell you're talking about.

DO THE JOB.

if you don't actively participate in a community nobody is going to give a shit about you, much less hand you a career with a pretty bow on it.