Hello
Let's talk about your problem(s) with your sites, show me one, or some of them, and we'll see what can be done. We'll have to find a better solution than LastPass, if you think that it is the source of password leakage, but even so, we still have to investigate deeper, into the logs and check the code on the servers where the sites are hosted. This can be some laborious work, might not be doable in a day or two...
When you say long term, does it mean that you need someone to check the sites once in a while, or something beyond this task? I am asking, because I am available for long term, even for a full time remote job, moving from the securing of the sites, which indeed is urgent, to other serious web & hosting related stuff.
Despite the very low reputation on this site, I've seen a lot of stuff in the last 10 years and would like to at least talk about what you need to be done. In fact, this is my 50th bid, and only got one project until now, so talking is almost for free.
Best regards