HTTP/2 302 server: nginx date: Sun, 01 Feb 2026 12:26:36 GMT content-type: text/html content-length: 138 location: https://jobs.refreshmiami.com/jobs strict-transport-security: max-age=31536000; includeSubDomains x-frame-options: SAMEORIGIN x-powered-by: Getro content-security-policy: upgrade-insecure-requests referrer-policy: no-referrer-when-downgrade x-content-type-options: nosniff x-xss-protection: 1;mode=block HTTP/2 200 server: nginx date: Sun, 01 Feb 2026 12:26:36 GMT content-type: text/html; charset=utf-8 vary: Accept-Encoding content-encoding: gzip strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-powered-by: Getro content-security-policy: default-src 'self' https://*.getro.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.analytics.google.com https://*.dev.getro.dev https://*.getro.com https://*.googleapis.com https://*.hotjar.com https://*.hubspot.com https://*.posthog.com https://*.segment.com https://a.omappapi.com https://api-sa.substrate.io https://cdn.cookie-script.com https://cdnjs.cloudflare.com https://chimpstatic.com https://connect.facebook.net https://edge.fullstory.com https://jobs.arena.run https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://loader.nutshell.com https://plausible.io https://rs-cdn.beondeck.com https://script.hotjar.io https://snap.licdn.com https://ssl.google-analytics.com https://static-tracking.klaviyo.com https://static.hotjar.com https://static.klaviyo.com https://tagmanager.google.com https://web.cmp.usercentrics.eu https://www-analytics.beondeck.com https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://*.analytics.google.com https://*.dev.getro.dev https://*.getro.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.hubspot.com https://*.ingest.sentry.io https://*.posthog.com https://*.segment.com https://467494333417-getro-resumes.s3.amazonaws.com https://a.klaviyo.com https://analytics.tiktok.com https://api-sa.substrate.io https://api.hubapi.com https://api.segment.io https://cdn.filestackcontent.com https://connect.facebook.net https://fast.a.klaviyo.com https://forms.hscollectedforms.net https://fullstory.com https://plausible.io https://px.ads.linkedin.com https://rs.fullstory.com https://static-forms.klaviyo.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com wss://*.hotjar.com; img-src 'self' blob: data: https: https://*.dev.getro.dev https://*.getro.com https://*.hotjar.com https://*.posthog.com https://a.klaviyo.com https://api-sa.substrate.io https://cdn.filestackcontent.com https://static.klaviyo.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://*.dev.getro.dev https://*.getro.com https://*.hotjar.com https://ajax.googleapis.com https://fonts.googleapis.com https://p.typekit.net https://tagmanager.google.com https://use.typekit.net https://www.togethxr.com; font-src 'self' data: https://*.dev.getro.dev https://*.getro.com https://*.hotjar.com https://cdn.shopify.com https://fonts.gstatic.com https://static.klaviyo.co https://static.klaviyo.com https://use.typekit.net script.hotjar.com; frame-ancestors 'Self' https://*.dev.getro.dev https://*.getro.com; frame-src 'self' https://*.hotjar.com https://*.hubspot.com https://vars.hotjar.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; media-src 'self' https://*.dev.getro.dev https://*.getro.com https://cdn.filestackcontent.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff permissions-policy: accelerometer=(), camera=(), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=(), autoplay=(), display-capture=(), fullscreen=(self), picture-in-picture=(), screen-wake-lock=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), report-to=permissions-policy report-to: {"group":"permissions-policy","max_age":86400,"endpoints":[{"url":"https://api.getro.com/api/v1/permission-reports"}]} x-xss-protection: 1;mode=block x-permitted-cross-domain-policies: none cache-control: public, max-age=60 x-cache-status: EXPIRED cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-site