Lead Endpoint Researcher

The role

You will research AI coding agent runtimes and design secure sandboxing architectures. You will build infrastructure to deploy and operate local models across various endpoint environments including macOS, Windows, and Linux.

What you will do

• Research AI coding agent runtimes
• Design agent sandboxing architectures
• Explore and implement OS-native isolation mechanisms
• Build endpoint harnesses to intercept and control agent execution flows
• Design infrastructure for deploying and running local LLMs
• Evaluate local inference runtimes and model formats
• Develop mechanisms for model discovery, installation, and lifecycle management
• Research hardware-aware model selection and routing
• Build benchmarks for model performance on endpoint hardware
• Investigate security boundaries between models, agents, and enterprise resources

Required qualifications

• Deep understanding of operating system fundamentals: processes, permissions, filesystems, IPC, networking, signals, and process trees
• Strong understanding of sandboxing and workload isolation concepts
• Hands-on systems experience across multiple operating systems, ideally including Linux, macOS, and Windows
• Experience building or debugging software that runs directly on developer endpoints, workstations, or servers
• Comfort operating close to the metal: binary behavior, system calls, OS APIs, environment variables, config files, process injection/interception, and runtime behavior
• Investigative, reverse-engineering mindset
• Ability to move comfortably between research prototypes and production-quality systems code

Nice to have

• Experience running or deploying local LLMs using frameworks such as llama.cpp, MLX, Ollama, ONNX Runtime, or similar inference runtimes
• Understanding of model quantization, KV-cache behavior, GPU memory constraints, model loading, and inference performance
• Experience with NVIDIA CUDA, Apple Metal, DirectML, ROCm, or other hardware acceleration stacks
• Experience with Linux namespaces, seccomp, cgroups, AppArmor, SELinux, eBPF, or container runtimes
• Familiarity with macOS sandboxing, Endpoint Security Framework, launchd, XPC, virtualization, or Apple Silicon
• Familiarity with Windows security primitives, Job Objects, AppContainers, Windows Sandbox, Hyper-V, WSL, ETW, or Windows process APIs
• Hands-on familiarity with AI coding agents such as Cursor, Claude Code, Copilot CLI, and Codex
• Experience with endpoint management or fleet deployment technologies such as MDM, Intune, Jamf, SCCM, or enterprise software distribution systems
• Experience with containers, microVMs, or lightweight virtualization technologies
• TypeScript experience

About the company

PointFive finds the cost buried inside enterprise infrastructure. Engineering sits in Tel Aviv and the go-to-market team is focused on North America.