That might be true. But the answer isn’t hiring someone with no real world experience. I would hire an entry level developer before I would hire an entry level security person.

I didn’t mean “understaffed and they need more people and so that’s a great move on OPs part”.

I meant “they’ll never hire as many security people as they should have on staff and OP would be wading into low-demand territory”.