I've been out of grad school just less than a year and have been a professional web programmer (mostly .NET) for about 1+ years now. After some exposure to my company's IDS, network security, and my own experiences in developing more secured web apps got me into penetration testing/IT security field. Over the past few months, I built my own home security lab to experiment with and pretty much self-taught a large amount of security topics through the internet and various textbooks. I ended up getting my CCNA and Security+.
Not even a year out of school I'm already looking to change my career. My company is somewhat small and has really no need for a devoted secure professional and all that stuff is handled by our admins. I'm looking for a way to get started but do I really have to start from scratch as an IT helpdesk?
What types of positions, if any, are open someone like me? Professional experience as a web developer, certs, but no actual experience in the industry?