Chris Hadnagy’s job is to make sure employees don’t fall prey to a hacker’s tricks. Fortune 500 companies pay him to test their employees. The Wall Street Journal asked him how he does that.