WordPress has a comprehensive tutorial page for securing WordPress-based sites against hackers and malware. You may view this tutorial here: Hardening WordPress.
Additionally, you may install a security plugin to further secure your WordPress site. Better WP Security and Bulletproof Security are the plugins that we recommend