My point was that you don't need security knowledge. You need IT knowledge and experience...which you've already started to get.

Security is really a specialized set of skills and knowledge within IT. You have to build on the IT knowledge to gain the Security knowledge.