Skip to content
Pointfive

Lead Endpoint Researcher

Tel AvivHybrid · Israel
Staff · FullTime · Engineering
POSTED 23 SEPTVERIFIED 17H AGO
Apply Ask
Role
46 days opentrue age
Posted 23 Sept
CompanyPointfive →
12open roles
Opened · 30d
+0
Closed · 30d
−0
30d window
Market
9,307open · Staff Software engineering
All software engineering
75,011open
All tracked boards · live 8 Nov · n=9,307
DockerLLMs

About PointFive

PointFive finds the cost buried inside enterprise infrastructure, from the cloud to coding agents. We pioneered DeepWaste across cloud and data platforms, and we are now doing the same for AI token spend with TokenShift.

Fanatics, H&M, Hertz, Nubank, Citizens Bank and other Fortune 500 companies use PointFive to see and cut what their infrastructure and AI actually cost.

We have raised $96 million, most recently a $60 million Series B led by Accel. Engineering sits in Tel Aviv and our go-to-market team is focused on North America. PointFive Labs, our research arm, publishes original work on how infrastructure and AI actually get paid for.

CRN named us one of the 10 hottest cloud computing startups of 2026, Forbes Israel put us on its Next Billion Dollar Startups list, and Redpoint selected us for its InfraRed 100, its ranking of the private companies shaping the future of cloud infrastructure.

About the Role

TokenShift is PointFive's newest product — an endpoint runtime for AI coding agents that gives organizations control, visibility, and efficiency across how agents execute commands and consume models.

As AI agents move from chat interfaces into developer machines, they increasingly need access to shells, filesystems, credentials, developer tools, and local compute. At the same time, enterprises are beginning to run models locally — on laptops, workstations, developer VMs, and managed endpoint fleets — across a wide variety of operating systems and hardware architectures.

This role exists to push that frontier forward.

You'll research how AI coding agents execute and isolate workloads, design secure sandboxing mechanisms, and build the infrastructure required to deploy and operate local models across heterogeneous endpoint environments. You'll work across macOS, Windows, Linux, WSL, developer containers, and other runtime environments, figuring out how to provide agents with powerful capabilities without giving them unrestricted access to the machine.

It's a rare opportunity to work at the intersection of operating systems, endpoint security, AI infrastructure, local inference, and developer tooling — in a product already running inside enterprise engineering environments.

What You'll Do

Research AI coding agent runtimes — reverse-engineer how tools such as Claude Code, Cursor, Copilot CLI, Codex, and emerging agents execute commands, access files, spawn processes, and interact with the operating system.

Design agent sandboxing architectures that safely constrain filesystem access, networking, process execution, credentials, and other sensitive endpoint capabilities.

Explore and implement OS-native isolation mechanisms across macOS, Windows, and Linux, including containers, namespaces, sandbox profiles, virtualization, restricted processes, and permission models.

Build endpoint "harnesses" that allow TokenShift to intercept, control, observe, and modify agent execution flows.

Design infrastructure for deploying and running local LLMs across heterogeneous endpoint fleets, accounting for operating system, CPU architecture, GPU availability, memory constraints, and hardware acceleration.

Evaluate local inference runtimes and model formats such as llama.cpp, MLX, ONNX Runtime, Ollama, vLLM-compatible runtimes, and emerging alternatives.

Develop mechanisms for model discovery, installation, versioning, updates, health monitoring, and lifecycle management across large numbers of developer machines.

Research hardware-aware model selection and routing — deciding which models can run effectively on Apple Silicon, NVIDIA GPUs, Windows workstations, Linux machines, CPU-only environments, and other endpoint configurations.

Build benchmarks that measure model latency, throughput, memory consumption, startup time, resource contention, and developer experience on real endpoint hardware.

Investigate security boundaries between local models, cloud-hosted models, agents, MCP servers, shells, and enterprise resources.

Collaborate with the core CLI and platform teams to take endpoint research from prototype through production.

Source · PointfiveFirst seen 7 NovOriginal ↗