"Cybersecurity" work in Chicago means working with derivatives trading and exchanges and large enterprises.
"Cybersecurity" work in NYC means working with the big financial and media companies (and, presumably, over the next couple years, more and more startups).
Cybersecurity work in Maryland means working for government contractors.
This article is chock full of valid points but might be more of a cautionary tale about working in the greater DC metro area. Contrary to what this article would have you think, most high-end security work is not done for the government.
There is not much worse in my book, at a Microsoft shop where they refuse to consider anything else.
Security can also be about identifying and mitigating risks to make a formerly unprofitable certain loss into a viable business opportunity. Big picture example: how many US banks would have offices in China or Russia right now without the help of security professionals? It's not all about bopping people on the head.