There's a lot less people in security than in software engineering, and paranoia comes with the field, so the data really isn't very good. I'm also not entry level. I don't want to do compliance stuff because none of the people I've talked to seem happy with it - the salary range I quote for being willing to do that sort of work is fairly far beyond what I expect to get.