Well it depends. The task of identifying spyware/malware and analyzing it requires a lot of knowledge about the operating system you are working on, being able to deal with code in general (be it assembly, reverse engineering, etc.) and of course knowing protocols (be it https, http, and any other protocol) including how they work on the mathematical level.
Computer science students often know a lot about the os they are working with, coding in general etc., because they work with them every day and are nerdy in general, but not because of the content of computer science lectures. Computer science is more concerned with the science of computing. Meaning you learn e.g. how to compute things with algorithms on abstract models of machines (you actually don't care about the specifics like OS/ hardware etc.) and how to develop those algos and how to classify their performance. Of course the basics of programming and OS architecture are taught, but the focus is on abstract concepts. E.g. instead of learning HTTPS protocol you might learn about the math of cryptography which again would allow you to understand most secure protocols by reading their spec. You learn the theoretical basis for to understand real world stuff on your own.
Common topics in compsci would be: programming, analysis, linear algebra, algorithms and data structures, graph theory, ...
You can study IT-Security at some universities, which is probably a bit closer to praxis.