I'm an SRE/blue teamer trying to move into the AppSec side (email me if you are looking for someone :D). My impression is that there is a large demand for AppSec people with development skills. Jobs pay well and seem incredibly interesting to me, too.