I don't see anything out of the ordinary there. This may go back to a time when there was a problem with logrotate. Let's update the file's date and time, then check it on June 1st to see if it has rolled over.
The touch command will give the security.log the current date and time. If the file did not already exist, an empty file would be created.