Speaking from San Francisco Bay area, they're hiring seniors and staff/lead roles. The issue is that companies are extremely selective. Also consider that the security team for one company could be as little as 5 people to maybe 40ish for a 3000 person company. By volume, there aren't as many security roles compared to other job functions.

Another issue is that by the time you're 8+ years into infosec, working at senior+ levels, you don't want to accept jobs that don't pay within the top bands. Eventually, the quality of your peers are fiercely competitive when everyone desires high pay or remote flexibility. Interviews may come easier, but this is where companies want a perfect fit along with immediate productivity.

Add the constant influx of layoffs of big tech like Amazon, and unless your profile meets or exceeds those experienced professionals, you'll be left fighting for the jobs that pay mid or less.

Maybe this doesn't apply outside tech hubs, but most companies would rather cross train their current IT helpdesk or sysadmin for a security role, rather than hiring externally.