Fixing security vulnerabilities in Wordpress website

I had a security report undertaken for my WordPress site when it became infected and need someone to implement the recommendations which include the points below. Please can you quote for the work to be done.

1. Full scan of the entire codebase
2. Removal and restoration of any infected file(s)
3. Remove plugins affected by 0day (WP Files Manager)
4. Replace the current security system;
5. Full firewall configuration to block any type of malicious behaviour
8. Introduction of 2FA for admin accounts
9. Introduction of strong-password policy for all registered users
10. Prevent version number leakage
11. Prevent user-name leakage
12. Flag potentially unstable plugins
13. Enable automatic updates across the system

Report is attached