October 17, 2026
Dear [Hiring manager's name],
At Meridian Health Systems I serve as the escalation point for a six-analyst SOC protecting a hospital network of 5,200 endpoints, handling roughly 120 escalated alerts a week in Microsoft Sentinel. I'm applying for your Cybersecurity Analyst role because your posting describes a security team defending patient data at real scale, and that's exactly the pressure I work under every shift.
I contained a credential-harvesting phishing wave targeting 1,800 clinical staff in under an hour, blocking lateral movement before any patient data left the network, and the 40-plus KQL correlation rules and nine SOAR playbooks I authored brought mean time to detect from 18 hours to 2.7 while trimming false positives 61%. Twenty-four hypothesis-driven threat hunts mapped to MITRE ATT&CK also surfaced two dormant persistence mechanisms our EDR tooling had missed.
I work daily in Microsoft Sentinel and Splunk, hold the CISSP, GCIH and Security+ certifications, and I coordinate HIPAA and SOC 2 audit evidence across assessment cycles that have closed with zero security findings, year over year. I write detection logic the way I'd want to inherit it: documented, tested and easy for the next analyst to trust.
I'd welcome a conversation about which alert categories create the most noise for [Company name]'s SOC right now. I'm happy to walk through the phishing containment and the detection-rule work in more detail. Thank you for your time.
Sincerely,
Riley Harris
