Must have:
ZAP - Automation and Manual both
Trivy - Used for security scan. Should know how to perform scan.
cypress - Must have valuable hands-on
Should have knowledge on DevSecOps
Docker - At least should know basics like how to build images, run containers, finding running processes, etc.
Github
Valuable Communication skills
Valuable to have:
Working on automation to automate the ZAP scan for various apps.
Performing pen testing for various apps (Manual) and updating them inthe security report.
Preparing security reports.