This correlates with my experience. I hustled my way into a only paid undergrad research assistant role that didn't previously exist at a top-tier infosec lab doing IPS/IDS work and helping grad students fix their code. It was necessary as there were too many applicants for too few menial campus jobs.