The situation I'm in now is that I'm very good at several aspects of security, but I'm not an rock-star at any of them (although in many ways I feel just a step or two away). In a way, being a jack-of-all trades is very useful for my current role, which involves a lot of incident response type things: network forensics, host-based malware forensics, log analysis, etc. I get great performance reviews in a company full of talent, but its hard to accurately assess yourself (and like many I struggle with impostor syndrome). This year, I'm focusing on getting better at programming and going beyond the basic aspects of reverse engineering. Basically, I'm trying to find a path to specialization in order to progress. I could probably easily land a job making ~50k more than I do now, but I'm planning on attempting to negotiate for a decent raise the next time I get promoted. I like everything else about the company,so if we could come to some kind of an acceptable situation I would love to stay.
However, if someone offered me $200k today for a full-time position at a private company, I would almost certainly accept. I can deal with less than ideal or even boring work as long as there's a good work/life balance that lets me keep working on projects at home. And even if the work isn't glamorous, I'm the type of person that enjoys all kinds of work, physical or mental. Before I got into security I did everything from shovel half-rotten fish into buckets for a living to running network cable. As a caveat, if its a government/contracting job, it would probably have to be $300k (which is probably unrealistic). There are aspects of government work that are interesting, but from my experience the negatives almost always outweigh the positives.