In this paper we outline a new process model for security engineering. This process model extends object oriented, use case driven software development by the systematic treatment of security related issues. We introduce the notion of security aspects describing security relevant requirements and measures at a level of abstraction. We define a micro-process for security analysis supporting the systematic development of secure components within iterative systems development.