WordPress Malware Removal & Security Cleanup Expert Needed

My WordPress website has been infected with malware and I need an experienced security expert to clean it up completely, find out how it got in, and lock it down so it doesn’t happen again. Symptoms may include suspicious redirects, injected code or spam links, unknown admin users, modified core files, and/or warnings from Google or my hosting provider. I’m looking for a thorough, permanent fix, not a quick patch. What you’ll do: Scan and identify all malware, backdoors, malicious scripts, and injected code across files and the database Clean or replace infected WordPress core, theme, and plugin files Remove unauthorized admin accounts and suspicious cron jobs Identify the entry point (vulnerable plugin, weak credentials, outdated software, etc.) Update WordPress core, themes, and plugins, and remove anything abandoned or unused Reset credentials (WP admin, database, FTP/SFTP, cPanel) and regenerate security keys/salts Harden the site: file permissions, wp-config.php protection, disabling file editing, login protection, and a firewall/security plugin setup Help request removal from Google Safe Browsing and other blacklists if the site is flagged Confirm the site works normally after cleanup with no broken functionality Requirements: Proven experience removing malware from WordPress sites (please share examples or reviews) Strong knowledge of PHP and how to spot obfuscated or malicious code Comfortable working in cPanel, File Manager, phpMyAdmin, and via SFTP/SSH Understanding of web security best practices and common WordPress vulnerabilities Takes a full backup before making any changes Deliverables: A fully clean, working website A short report covering what was found, how the site was compromised, and what was fixed Recommendations to keep the site secure going forward