In looking for a job in the Raleigh/Durham area, every information security position has CISSP required, or 5+ years experience in information security required. This doesn't add up. Every day I hear about infosec's massive job growth, and "how can we get the young people interested in security?" Plus the Research Triangle is a decent tech hub. I'm graduating with a CS degree, CNSS 4011 cert, and soon will have Security+. This seems like an ideal posture to have being a recent grad trying to break into the industry. What am I missing here?
Just to clear some confusion and be constructive: CISSP is nothing but a certificate that says "I have worked in the field of IT security for at least 5 years". It's no formal education, it's just a piece of paper stating exactly this. So when a CISSP is required for a position, this translates to: "Bring at least 5 years of experience with you". In other words, a senior position.
If you are a recent grad you should realistically not apply for a senior position. There are various ways of acquiring the work experience necessary, probably the easiest way is getting a job at an (ideally security focussed) systems house as developer or admin, depending on which aspect of IT security is more relevant for you. Don't forget that IT security is an aspect of all IT related jobs.