Year and a half taught us that WordPress security should not be taken lightly by any means. Between 15% and 20% of the world's high traffic sites are powered by WordPress. The fact that it is an Open Source platform and everyone has access to its Source Code makes it a prey for hackers.
Install the fix wordpress malware Firewall Plugin. This plugin investigates net requests to recognize and quit attacks that are most obvious.
Don't make the mistake of believing that your hosting company will have your back so far as WordPress backups go. Not always. It has been my experience that the company may or might not be doing backups while they say that they do. Why this take that kind of chance?
It's a WordPress plugin. They're drop dead easy to install, have all the functions you need for a job like this, and are relatively cheap, especially when compared to having to hire someone to get this done for you.
Install the WordPress Firewall Plugin. Prevent and this plugin investigates web requests to identify attacks that are obvious.
You don't always consider needing security, when your website is new but you do need to protect yourself and your investment. Having a site go down and not being able to restore it quickly may mean a loss of consumers who won't remember to look for your website again later and can't find you. Don't let this happen to you. Back your site up after you get it started, as the site is operational and schedule regular backups for as long. That way, you will have WordPress security and peace of mind.