I did the same transition 20 years ago. Apply for “product security” or “application security” positions. Not for “IT security” positions.