fix my WordPress website and remove malware -- 2

remove malware, unwanted codes, and miscellaneous links from our website and server.l also set up security for the future
and do these steps that can take to improve our WordPress website security?

WordPress Security in Easy Steps (No Coding)
Install a WordPress Backup Solution
Best WordPress Security Plugin
Enable Web Application Firewall (WAF)

WordPress Security for DIY Users
Change the Default “admin” username
Disable File Editing
Disable PHP File Execution
Limit Login Attempts
Change WordPress Database Prefix
Password Protect WP-Admin and Login
Disable Directory Indexing and Browsing
Disable XML-RPC in WordPress
Automatically log out Idle Users
Add Security Questions to WordPress Login
Fixing a Hacked WordPress Site
install SSL

this has to be done in both themes that are installed on the website
www.almurshidimed.com
and www.almurshidimed.com/arabic

the themes are similar but not connected

after doing this we will need to do improvements to the website to make it easier for customers to see information, offers, book appointments and contact us as well share our contents
so depending on your bid if it should include new theme or making the current one better