A generalist in cyber security is a professional with broad cross-domain knowledge across infrastructure, operations, risk, and incident response. Instead of focusing on one narrow specialty, a generalist can connect signals from different teams and understand how technical, physical, and business issues affect one another.
This matters because many attacks and failures cross boundaries. A ransomware event may begin as an endpoint problem, spread into identity and backup systems, and then become a business continuity issue. In defense, generalists help with triage, dependency mapping, escalation, and coordination when no single team owns the whole problem. They are especially useful in critical infrastructure, where a local outage can cascade into other services. Specialists still matter for deep analysis, but generalists provide the breadth needed to spot relationships, translate between teams, and keep response actions aligned.