WordPress security.. do I need plugins?

I want my website to be secure but I’m trying not to go overboard here. I’ve been hacked once in the past and I back up my sites now, but I want them to be secure.

I have the Limit Login Attempts plugin so that people can’t try 10+ times to login. I also changed my username so it is not “admin”.

In the past I’ve used “OSE Firewall” and “Secure WordPress”

Do i really need these??