[iends]

I got a Masters degree in Computer Science and my research focused on software security. I got a bunch of offers to go into security when I graduated. (I decided I was more interested in building things than breaking them and chose a software development role at a startup instead.)

I would suggest working towards CISSP depending on your formal education. If you're interested in software security learn IDA Pro, start a blog, set up a honeypot, start analyzing malware you collect, and write about it.