I'm pretty sure that all of these points still apply if you substitute "computer security" with any other sub-field of computer science.

In particular, internships! I've learned the hard way that these are very important. Don't plan on having summer vacations free to do things, that's a thing of the past.