It's bit of a chicken-and-egg problem: You will not easily get security job, because you don't have experience and you don't have experience, because you don't work at security. The same goes for e.g. CISSP - they require work experience, but lot's of jobs require CISSP. Go figure.

Having a solid profile - either on Github or Blog and entry-level certification could be a good start. Participation in events like CFG or other hackathons would also help open some doors.

I don't work at security myself, but based on what i've seen, having operational experience will also gain you more respect.

Good luck my friend.