UC cybersecurity student battles ransomware at Kroger and U.S. Bank

It started in high school with him taking classes in a criminal justice and forensics academy at Colerain High School in Cincinnati. He was interested in digital forensics and had a chance meeting with a ransomware negotiator.

These professionals use their technical IT knowledge along with good insight to protect organizations from cybercriminals by minimizing damage, reducing ransom demands, safely recovering encrypted data and stopping the release of stolen information.

“I learned more the cybersecurity side of forensics, which I think is very cool and very important,” says Bernhardt, a fourth-year cybersecurity student in the School of Information Technology at the University of Cincinnati. “It sounds cheesy to say, ‘I want to better the world and make people feel more secure,’ but there are a lot of bad actors out there and it is only gonna get exponentially worse.”

Securing private information for individuals and companies is a necessity. And Bernhardt is continuing to sharpen his digital detecting skills with co-op experiences at Kroger Co. and U.S. Bank. He is one of more than 9,600 UC co-op students who gain valuable real-world work experience with partners across industry, government, nonprofit organizations and the university while continuing to make progress toward their degrees.

At Kroger, Bernhardt was a financial auditor intern during three co-op experiences with the company. He gathered data for financial audits, corrected security flaws to protect sensitive files and ensured that network firewalls worked properly.

His work involved using automated code to find, format and document user permissions and system logs for mandated audits and also documenting how apps and automated scripts are used in a centralized database to improve security and restrict access to company information.

Co-op wages vary based on factors including field/industry, geographic location and level of experience

“Audits are a good way to make sure that what is in a company’s policies is actually being regulated and followed,” explains Bernhardt. “What good is a policy if nothing is being enforced? As auditors we help make sure the policies are being enforced and that financials for a company are correct.”

This summer Bernhardt is enjoying his fourth co-op experience in cloud governance, risk and compliance at U.S. Bank, the fifth-largest bank in the United States, with a focus on identity, access risk and security governance across cloud production environments.

It has offered a chance for Bernhardt to connect what he learned in the classroom with real-world security work. He’s seeing how cloud security, identity and access management and governance all work together to reduce risk across an organization.

Ethan Bernhardt is a cybersecurity student at the University of Cincinnati. Photo/Connor Boyle/UC Marketing + Brand.

“One project I have been involved in uses Wiz, a cloud cybersecurity platform, to help identify identity-based risks, including highly privileged access to sensitive cloud resources, and evaluate how those findings could translate into real security concerns to members of my team and other members of senior leadership,” explains Bernhardt.

“My experience at U.S. Bank, along with my co-ops at Kroger, has helped me better understand how important identity and access management is in real-world security. Ensuring people and systems have the right access is not just meeting compliance requirements; it is helping them do their jobs securely while reducing risk that a threat actor could take advantage of.”

Bernhardt has participated in numerous Capture the Flag (CTF) events which simulate real-world cyberattacks focusing on web exploitation. The gamified cybersecurity exercises and competitions allow participants to use hacking techniques to solve puzzles, exploit vulnerabilities and find hidden strings of text called “flags.”

“The challenges can involve things like analyzing suspicious files, looking at network traffic, testing a purposely vulnerable website or solving a cryptography puzzle,” explains Bernhardt. “It feels like a game because there are points, rankings, timers and teamwork, but the skills are very real.”

For much of his time at UC he’s been a member of Cyber@UC , a student organization that tries to teach the campus all aspects of cybersecurity.

Ethan Bernhard, (far left) is shown with his fellow classmates in April to compete in a statewide Capture the Flag competition hosted by the Ohio Cyber Range Institute on the UC campus. Photo provided.

The group stays up-to-date on new cybersecurity techniques, works with students on campus and at local high schools to encourage learning in the area of cybersecurity, runs various CTF events, operates and maintains a multiple platform lab and experiments with malware.

Bernhardt teamed up with classmates in April to compete in a statewide Capture the Flag competition hosted by the Ohio Cyber Range Institute on the UC campus. The event involved 68 teams with 226 students across Ohio who participated in the event. It gave students the opportunity to deepen their cybersecurity skills while competing in hands-on cyber challenges for a coordinated day of learning.

Bernhardt was a member of Team Cyber@UC during the event and the group won first place. Members also included UC students Gabriel Lowden, Nathan Hagan, Ian Balfour and Sean Huggins.

Bernhardt has been part of winning teams during CTF competitions at the Cincinnati-based Queen City Conference — they won first place during the 2024 and 2025 events — and were awarded the Black Badge, a custom electronic badge with a working geiger counter — highly prized by participants.

CTFs may feel like entertainment, but the events build skill sets for the future.

“They have helped me apply what I learn in class to hands-on problems that feel much closer to real security work,” adds Bernhardt.

Ethan Bernhardt, a UC student, completed co-op experiences at Kroger Co. and U.S. Bank. Photo/Connor Boyle/UC Marketing + Brand.

Students should take PD 1010 (Professional Development for CECH), an “intro to co‑op” class, and attend job initiation meetings the semester before they are expected to co‑op, explains Richard Hoyt, assistant professor in the College of Cooperative Education and Professional Studies.

Chat with your academic adviser to build a degree map and use that to plan co‑op terms; there is flexibility in information technology, especially when employers want back‑to‑back rotations. Hoyt says students are taught the full job process, but he stresses they can’t just rely on platforms such as Handshake, and Indeed to find a co-op.

“The most successful students leverage networking, their own personal networks, attend UC career fairs and employer events and information sessions,” adds Hoyt, who advises hundreds of cybersecurity co-op students annually. “Get your face in front of employers. That’s especially important for the first co-op.”

Featured top image of Ethan Bernhardt in the UC Esports Innovation Lab by Connor Boyle/UC Marketing + Brand.

UC defines cooperative education, or co-op, as meaningful, career-oriented, compensated workplace experiences. Co-op is a structured program where students complete academic coursework and get a paid job in their field of study, graduating with both a degree and real-world professional experience.

Find more info: What is co-op in college? How cooperative education works

Many UC co‑ops are paid, full‑time roles. Students often use co‑op earnings to help cover tuition and living expenses, which can reduce the need for loans and improve the overall return on investment of their degree.

Co‑op is deeply integrated into programs in engineering, design, information technology, business, arts, sciences and more, with support from the College of Cooperative Education and Professional Studies. UC is committed to offering all students career-building, real-world experiences related to their field.

UC students co‑op in Cincinnati, across Ohio, throughout the U.S. and abroad with employers ranging from startups, design studios and nonprofits to hospitals, government agencies and Fortune 500 companies.

Through one of the nation’s most robust co-op programs, UC students don’t just learn their future — they live it, alternating classroom study with real, career-shaping experience in industries around the world.

Students: Earn while you learn at UC.

Employers: Find your hire.