And secondly I think there might be a difference in our experience and approach. Usually I do open applications, not for one very specific function. Like with security you can do penetration testing, forensics, crypto, etc. and while I have more experience in some areas than in others, I like all of it. If they can use someone in forensics, I have a basis to start with (I had a forensics course) and I'd love to do it. Or if they need another person for the pen test team, that's my main trade and I'm all ears as well.
Usually the companies don't actually have a pile of resumes and they want to hire anyone with skills. Typically I meet someone on Twitter, or heard of the company when talking to colleagues/classmates/teachers/conference-goers and I email the company as a result.