Compare REST and SOAP Security

You own an internal integration layer that exposes customer-order and payment-adjacent services to partner systems and mobile apps. Some teams want to standardize on REST, while a legacy vendor integration still depends on SOAP. You have been asked to explain the security and operational differences before the platform team chooses a default pattern.