Thanks for jumping in Adam.
Call stack cliffnotes version:
1. Application.cfc.onRequestStart()
2. User.cfc.hasThisKindOfAccess()
3. User.cfc.initPermissions()
4. hiringManagerFunctions.cfc.checkAccess()
From there the stack make no sense, methods are on the stack that don't appear to have been invoked by the code, for example from a line that's a cfif involving simple strings.
The line that according to the stack calls the actual custom tag doesn't do any such thing, it calls a small method that does a simple query.
As you can see from the above, most of the stack is method calls; only the last two stack items are that custom tag.
I tried browsing directly to that custom tag, and it did throw that same error. I'll investigate locking those down on principle, but I have no reason to think that was the original problem. The call stack in the original error is totally different, in the direct call case it's just onRequestStart() then the custom tag.
We devs didn't repro the error, just saw tons of error emails. The page being hit is used constantly, normally without problems, form and url scopes were empty, no reason we could see why it was suddenly sideways.
The error emails kept coming right up until I restarted cf. Doing that was more or less a hail mary, "server seems lost in space, let's try a restart". Errors stopped immediately, no sign of that since, thankfully.