Resume · Updated Oct 2026

Joshua Offe Berkoh

Cyber Threat Intelligence & Threat Hunting · PhD Researcher, I2P Network Measurement

Cincinnati, OH joshuaberkoh19@gmail.com linkedin.com/in/joshfiifi github.com/joshberk joshuaberkoh.engineer

Summary

Cybersecurity professional and PhD researcher who measures the I2P anonymous network and publishes scenario-based threat investigations mapped to MITRE ATT&CK. Background in SOC monitoring and incident triage, and in security engineering at Intuit. Two IEEE papers accepted in 2026.

Experience

PhD Researcher · University of Cincinnati

2024 – Present
  • Design and operate a Python-based collection and analysis framework for studying hidden services within the I2P anonymity network.
  • Collect and structure application-layer observations from eepsite crawls and related network observations using MariaDB and reproducible pipelines.
  • Analyze hidden-service connectivity, infrastructure relationships, and ecosystem behavior through graph-based workflows.
  • Frame the work as dark-web intelligence research focused on infrastructure and ecosystem measurement, not real-world adversary attribution.

Security Engineer Intern · Intuit Inc., San Diego, CA

Jun – Sep 2023
  • Consolidated security repositories into red-team toolsets, improving operational efficiency by 20%.
  • Automated code-based compliance validation through Tox integration, reducing manual review effort by 30%.
  • Resolved compliance-related security issues before deployment, contributing to remediation of 70% of identified vulnerabilities.
  • Collaborated with cross-functional teams to improve security controls, deployment readiness, and control validation workflows.

Adjunct Instructor · University of Cincinnati

Jan – Apr 2023
  • Delivered hands-on cybersecurity learning activities focused on practical security concepts, applied investigation, and problem solving.
  • Improved student performance by 15% through applied exercises, structured feedback, and technical mentoring.

Threat Analysis, Detection and Mitigation · University of Cincinnati

Jan – Apr 2023
  • Researched APT tactics, techniques, procedures, and defensive countermeasures.
  • Applied behavioral analytics and threat intelligence concepts to support detection and mitigation planning.

SOC Analyst · Virtual Infosec Africa, Accra, Ghana

Oct 2021 – Jun 2022
  • Monitored and analyzed network activity supporting a 95% intrusion detection rate for a major financial institution.
  • Investigated security events and supported incident response activities, reducing response times by 30%.
  • Assisted with deployment and operation of SOC security solutions that contributed to a 20% reduction in cybersecurity incidents.

Publications & Data

Accepted

A Behavioral Temporal Graph Neural Network Framework for Detecting Botnets. IEEE iThings, 2026.

Accepted

Chrono-GINE: A Chronological Edge-Aware Graph Isomorphism Network for Self-Supervised I2P Network Behavior Modeling. IEEE Smart Data, 2026.

Dataset

I2P crawler validation dataset. IEEE DataPort. doi.org/10.21227/rkan-zq07

Selected Investigations

Simulated intrusion scenarios worked end to end on KC7 Cyber and written up as CTI reports. Full reports →

Case Scenario Scope ATT&CK
Solvi Systems ICS supply-chain intrusion 470 C2 connections · 38 endpoints 8
Inside Encryptodera Insider threat, 27-day exfiltration 306 endpoints 8