[dsacco]

The reason you haven't found companies hiring graduates for security is partly because security, like most specializations, generally skews towards more experienced candidates, and partly because it's a relative niche.

I'm happy to help you via email if you'd like to get in touch. Practically speaking, my advice would be to pursue bug bounties, read as much as you can in the field and implement security measures in code to understand them deeply.

Plenty of the large and reputable security firms are in an "always hiring" state, even for graduates.

[csnewb]

I know this is a broad question, but what skill set are security firms looking for in graduates/juniors? I have a year of experience in software development on a security product, and have done some basic security vulnerability assessments, but I'm not sure if that's enough to get hired somewhere else.