WordPress Security Expert Needed - Malware Audit & Remediation Estimate for fixes

We are looking for an experienced WordPress security/malware consultant to assist with an urgent website audit and remediation estimate for a client website. One of our internal developers handling this project unexpectedly became sick and is unable to complete the work, so we need immediate assistance stepping in and helping us finish the audit process. Project Background: The website appears to have malware/security-related issues and needs a professional audit. The site is hosted on nexcess.com We originally planned to move the site to an existing staging environment, but the staging URL was redirected by a parent company. Our team had already begun the process of downloading the website locally for analysis, but due to the developer becoming unavailable, we need another consultant to take over. What We Need: We are looking for someone who can: - Access the Nexcess hosting control panel/server - Download and set up the WordPress website locally on your machine - Perform a professional malware/security audit - Identify suspicious files, redirects, injections, vulnerabilities, outdated plugins/themes, or compromised components - Prepare a written remediation estimate and recommended scope of work Deliverables: Security audit findings List of vulnerabilities/issues discovered Recommendations for cleanup and hardening Estimated hours/range required for remediation Notes regarding staging/deployment recommendations once staging becomes available again Important Notes: This phase is primarily for the audit and estimate, not necessarily the full cleanup/remediation yet. Experience with hacked WordPress websites is required. Experience with Nexcess hosting, malware remediation, Wordfence, Sucuri, WP migrations, and staging workflows is strongly preferred. Ability to begin immediately is KEY. Our goal is to complete this by end of day today 4pm CST, June 16th