I think unless you want to send some money to a shady self-proclaimed hacker, you'd just go with a regular computer security company. They can do it and they'll have people who know what to look for. And before you yourself launch a large DDoS attack on "your" rented virtual server, contact your hoster and give them a heads-up, since that's really their servers and netwoking infrastructure.