WordPress Security Developer Needed

We need an experienced WordPress security developer to recover our website after a confirmed hack. The hosting provider found malicious PHP backdoors, remote command-execution code, and a modified index.php downloading malware from an external IP. Scope includes preserving a quarantined backup, scanning the hosting account for malware, backdoors, unauthorized users, cron jobs, redirects, and database injections, identifying the likely point of entry, removing the compromised installation, reinstalling clean WordPress core files, verified themes and plugins, cleaning the database, recovering approved content and images, removing unauthorized administrators and hosting users, securing wp-config.php, updating PHP, WordPress, plugins, and themes, reviewing file permissions, .htaccess, uploads, DNS, FTP accounts, and redirects, testing website, forms, email, SSL, and mobile functionality, and providing a written report. Do not simply delete the two reported files or install a security plugin. Please share your experience, process, turnaround time, fixed-price quote, and required access.