In this episode, host Khush Kashyap drops Will Bengtson into the following scenario: He's the CISO at Cendril when a departing star engineer, Jordan Reeves, transfers 14 GB to a personal Dropbox in the final 40 minutes of his last day. The files aren't random—architecture specs for Project Helix, a feature still six months from a stealth launch; internal QA test suites; and a customer segmentation model the data team built over 18 months.
You're the CISO at Cendril, a 500-person AI-native company moving fast. Your principal engineer—a beloved early employee—is walking out the door for the last time on Friday. But at 5:12 PM Friday afternoon, your DLP fires: 14 gigabytes just left his laptop for a personal Dropbox. In this episode of The Tabletop, Will Bengtson takes the hot seat and works the problem in real time.
Will has spent his career at the intersection of security and engineering. He built and secured cloud infrastructure at Netflix and Capital One, led platform and security engineering at HashiCorp, and taught cybersecurity as a lecturer at UT El Paso. He's now CISO at C1 (ConductorOne), the AI-native identity platform.
In this episode, host Khush Kashyap drops Will into the following scenario: He's the CISO at Cendril when a departing star engineer, Jordan Reeves, transfers 14 GB to a personal Dropbox in the final 40 minutes of his last day. The files aren't random—architecture specs for Project Helix, a feature still six months from a stealth launch; internal QA test suites; and a customer segmentation model the data team built over 18 months. Jordan's access was still live, his laptop wasn't wiped, and HR didn't formally terminate his account until 5:30 PM, a full 18 minutes after the alert fired.
Then the picture sharpens. Six weeks later, a direct competitor—Ascendant AI—ships a feature that maps almost exactly to Project Helix, down to two edge-case decisions Cendril's engineers made in internal design reviews. A patent surfaces that predates Jordan's notice, muddying the water, and soon after, Jordan's LinkedIn lists him as a principal engineer at Ascendant.
Will walks through cutting access that SSO alone doesn't actually cut, the gap that lets offboarding lag behind risk, whether to go loud with a preservation demand or go quiet and image the laptop first, how to manage a furious VP of product and a CEO who says "I don't care if we win—I care that every engineer sees that we fight," and what the evidence really supports versus what everyone wants it to say. At the end, he renders his verdict: real incident or constructed fiction?
Quotes
“I don't know why people wait until the last day or the last two weeks to start taking the data if they're gonna take it all at once.”
“The biggest mistake is thinking that by cutting their single sign-on, that it cuts all access.”
“Why don't we put the energy into making the product better—and prove that Jordan wasn't the secret sauce that got us to where we are today?”
“Look, were these your best ideas? Can we do better? I'd hate for something like this to really poison the culture.”
“The scenarios where we think, ‘oh, this is gonna be a nothing burger,' have been the ones where customers are like, ‘What? How did you not tell us?'”
Time Stamps
[00:00] Welcome to The Tabletop: Meet Will Bengtson, CISO at C1
[00:47] The Rules: You Are Now the CISO at Cendril, a 500-Person AI-Native Company
[01:20] The Scenario: A Model Engineer's Last Day and a 5:12 PM DLP Alert
[02:00] First Gut Check: “This Sounds All Too Familiar”
[03:15] Inject One - The Full Log: 14 GB, Three Sensitive Folders, Access Still Live
[03:50] Your Next Hour: Cutting the Access That SSO Doesn't Actually Cut
[04:50] The 18-Minute Gap and the Case for Phased Offboarding
[07:00] Do You Contact Jordan? Relationships vs. Legal Exposure
[08:50] Go Loud or Go Quiet: A Preservation Demand vs. Imaging the Laptop
[10:15] Inject Two - Six Weeks Later: A Competitor Ships Your Stealth Feature
[11:00] The Patent Twist: Filed Before Jordan Ever Gave Notice
[13:30] What Evidence Do You Actually Have? Building the Civil Case
[14:50] Calming the VP of Product Down from Going Nuclear on LinkedIn
[15:50] Inject Three - Values Tradeoff: Jordan Resurfaces at Ascendant AI
[16:40] Three Legal Paths and Why He Chooses to Slow the Roll
[17:20] The CEO's Real Motive: “I Care That Every Engineer Sees That We Fight”
[18:50] Three Months Later: The Retrospective and the Culture Question
[20:45] The Moment of Truth: Real Incident or Fiction?
[21:30] Off the Table: The Biggest Mistake Companies Make Offboarding Trusted Employees
[22:25] Off the Table: Building a Security Culture That Trusts People and Still Protects What Matters
[23:50] Off the Table: The Strangest “Nothing Burger” That Blew Up
Links
Connect with the guest and host on LinkedIn!
Learn more about: