Secure WordPress / TownPress Theme Recovery, Upgrade, Malware Review, and Hardening

I need an experienced WordPress/PHP developer to help recover, modernize, and secure an old WordPress website in a private staging environment. This is not a normal redesign project. The site is an older WordPress build that appears to use the TownPress theme with a custom child theme. The site must remain dynamic because it includes news and other WordPress-managed content, so this cannot be converted into a static HTML site. Known details: Theme: TownPress, Town Press Child Parent/template folder appears to be: tp2 Child theme folder appears to be: tp2-child The current TownPress theme appears to still be maintained. The goal is to determine whether the old site can be safely upgraded to the current official TownPress version while preserving the site’s content, design, news functionality, and customizations. The old site may contain outdated plugins that should not be restored publicly without review. Important: Do not restore this directly to a public server. Do not modify the original backup. Work only from a copy in a local/private staging environment first. I need someone to restore it safely in private staging, review the database/theme/plugins/uploads for malware or suspicious code, upgrade WordPress and TownPress if feasible, preserve the child-theme customizations, and harden the site before production. Please confirm whether you have experience with old WordPress recovery, premium theme migration, child theme migration, malware review, and WordPress hardening. SEE ATTACHED FILE FOR SCOPE OF WORK