Cybersecurity Analyst · cover letter
[Date]
Dear [Hiring Manager],
Last year I rebuilt the alert-tuning logic in our Splunk SIEM and cut mean-time-to-detect from 41 minutes to 9, while reducing false positives by 63 percent so analysts stopped chasing noise. I would like to bring that same focus on signal over volume to the Cybersecurity Analyst role at [Company].
In my current SOC, I run tier-two triage across roughly 1,200 daily alerts, mapping adversary behavior to MITRE ATT&CK so escalations carry context instead of raw logs. When a phishing campaign slipped past our gateway and harvested three sets of credentials, I led the incident response: isolated the affected hosts, revoked the sessions, and closed containment in under 30 minutes with zero lateral movement. I documented the root cause and wrote the detection rule that has caught four similar attempts since.
Vulnerability management is the other half of my week. I prioritize remediation by exploitability and business impact rather than raw CVSS, which helped us clear 94 percent of critical findings within SLA last quarter, up from 70 percent. I hold Security+ and am partway through my CISSP, and I am comfortable scripting in Python to automate the repetitive parts of triage.
If this team is carrying the alert fatigue most postings like this one describe between the lines, tuning logic is where I would start, the same way cutting the rules that fired on noise took mean-time-to-detect from 41 minutes to 9. I would want to see your current false-positive rate before I promised a number, but I know where I would look first.
Sincerely,
[Your Name]
[Phone]
[Email]