JAX-WS is an API for implementing
SOAP web services in
Java, nothing more, nothing less. It is up to each JAX-WS implementation (like Metro, Axis2, etc.) to integrate further standards that are commonly labelled WS-*. Check the documentation of whatever implementaion you're using to see what it supports and how to use it.
WS-Security, specifically, is supported by all major JAX-WS implementations.