SOA enables the design of flexible and modular software applications that can be used in a crossorganization context. Unfortunately, those qualities have a negative impact on the security of the software application. In this paper, we investigate the production of secure SOA applications. In particular, we provide an approach to build secure SOA applications that takes into account the new security issues introduced by the complexity of SOA-based applications. We build upon two different approaches to secure SOA applications: model-driven development and the use of security patterns.