Yes, you do need Wordfence, if you don't have a security plugin (application level) installed on your WordPress website. And no if you already have a security plugin or server-level security installed.