Server Security Expert

We are going through an RFP process with a client and they have some server security guidelines that we need to follow. They have run a few tests on our server and given us a list of things to fix. We need someone who can fix these things and do it Fast! We need everything done by Monday the 19th! We are running a 2012 windows server with iiS on an AWS EC2 with ASP .NET applications There is also a front end component that has Java, JQuery, HTML and CSS. We have a detailed report from IBM's App Scan and also have an SSL set up. Here us the list of the vulnerabilities that need to be fixed... 1) DOM Based Cross-Site Scripting Fix:Review client-side code and clear your input sources 2) Encryption not apllied Fix: Force the use of HTTPS when sending sensitive information 3) Hidden Directory Detected Fix: Issue a "404 - Not Found" response status code to a prohibited feature or remove it completely 4) Unsafe third party link (target = "_ blank") Fix: Include the rel = "noopener noreferrer" attribute on each link element with target = "_ blank" 5) Query Parameter in SSL Request Fix: Always use the SSL and POST (body) parameters when sending sensitive information. 6) Body Parameters Accepted in the Consultation Fix: Do Not Accept Body Parameters That Are Sent in Query Sequence 7) Verify SRI (Sub-feature Integrity) support Fix: Include in each third script / link element SRI (Subresource Integrity) support. 8) Browsing Scan Against SSL / TLS (also known as BEAST) Fix: Supported clusters of change server 9) SHA-1 number sets were detected Fix: Supported clusters of change server 10) Web Server Transmits Cleartext Credentials FIX: Make sure that every sensitive form transmits content over HTTPS.