And yet it is still very hard to find anyone with specialist skills it seems, at least in security.

Edit: to clarify; I'm mostly advocating people look at upgrading via specialty into areas where there's clear demand, not trying to undermine marcinzm's point.