Hacker Tracker
Try to track down a hacker before they control the network.
Kind of like Pandemic. The network has different nodes - homes, server farms, businesses. As the hacker takes control of each, they get resources (money, computing power, proxy routing). Your team of specialists is trying to stop them.
Network Security: can watch traffic move through the network, identify which nodes are being targeted. Can deploy and upgrade firewalls. Can close down network routes. Interface is a network map.
Security Analysis: can identify viruses and worms. Can pull encryption keys from stashes and unlock resources.
Coder: can convert viruses, worms and proxies to help.
Grey Hat: Can lay honey pots, can capture unaffected portions of the network to preemptively protect it (or shut it down).
Initially the hacker has some small number of malware. As they gain more resources they can unlock more.