I've never hired someone who knew Rails. I'm not even sure I've hired anyone who knew Ruby. My lead product dev is a Lisper. Here's an industry pro-tip: when you want to optimize for "good programmer", don't put "must know Rails 2.3.x+ and have experience with one of Sinatra, Ramaze, or Rack". Just look for the smug lisp weenies.
The people who do best in security are the ones who understand computer science. They are:
* Very solid C programmers, or
* Understand compiler design, or
* Know a thing or two about signal processing, or
* Know how to implement compression algorithms, or
etc etc etc.
That's exactly the issue I have with this poll. The cart appears to be dragging the horse. You write web applications to solve problems. What problems are you solving? Very few people will put money up against the problem of "need a better web framework".