One thing that would use no resources is a NAT router for starters. It basically stops 99.9% the unsolicited stuff (stuff you didn't click on, download or ask for).
Purists will argue that NAT provides no security. It's similar to a closed door. It might not be secure, but by its nature it's preventing a lot of crap coming in.
On the solicited side of the equation, I would suggest a robust AV solution that suits your hardware, some sensible browser security, such as ad blocker (I prefer Ublock Origin and its lists). Consider these examples -
https/lifehacker.com/5770947/five-best-browser-security-extensions
The blocking of ads also reduces the load of pages for your hardware.
Beyond that, the best security is to limit the users to 1, have said user not visit dodgy websites or links.
Also consider tuning your system to use less resources, such as services, start-up processes, scheduled tasks and non-essential browser extensions or toolbars.
I won't argue against an Internet Security package, but not all users need one. So decide your needs and see what's available. When I went looking at a package recently for a friend, one that looked quite good was Bitdefender, but I don't remember its system footprint offhand.