Text this: Security Engineering for Service-Oriented Architectures