Graduates trying to get started in information security face a hard time getting the experience employers demand. We talk to some who succeeded.